Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h_MyvULI-7vbzdLTW3M7DpGHfmM.roa
File: h_MyvULI-7vbzdLTW3M7DpGHfmM.roa (raw, json)
Hash identifier: NBzHYZi6gFj5+vLpioX7TWvFq28y5aBaY9+u1HmnecQ=
Subject key identifier: 87:F3:32:BD:42:C8:FB:BB:DB:CD:D2:D3:5B:73:3B:0E:91:87:7E:63
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018649299A144BA5389CD06767524109475C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h_MyvULI-7vbzdLTW3M7DpGHfmM.roa
Signing time: Mon 13 Feb 2023 05:05:08 +0000
ROA not before: Mon 13 Feb 2023 05:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212411
IP address blocks: 194.87.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:29:9a:14:4b:a5:38:9c:d0:67:67:52:41:09:47:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 13 05:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87f332bd42c8fbbbdbcdd2d35b733b0e91877e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:dd:f9:3d:63:39:1f:e9:cf:b1:2f:e8:0d:
e5:ed:b1:af:b9:26:27:19:8a:fa:b8:b1:06:75:b1:
1e:6e:f3:00:04:65:84:63:53:51:70:be:71:0e:c3:
34:4a:2b:6a:11:37:1f:ce:18:19:6e:74:ec:a9:6f:
62:7f:33:62:ba:09:de:18:95:bb:13:ad:86:0d:6f:
1f:3b:9a:16:d4:28:12:5f:a1:97:4b:02:31:eb:ff:
4e:02:14:22:8f:d8:ed:33:22:86:7f:b2:4f:ee:df:
a4:3c:a3:50:09:0c:2d:37:ba:62:61:62:bb:d3:1f:
91:73:78:cd:31:38:51:d6:a9:84:1f:49:be:73:f6:
7e:56:7a:56:db:d6:f6:34:72:88:5d:1c:72:de:ab:
e5:fe:64:66:8f:95:ec:a0:cc:bf:53:f9:c9:09:5a:
06:e2:97:14:b7:d6:ed:de:0f:ae:2a:d8:99:9e:c0:
41:18:22:a4:4f:49:93:67:96:32:08:23:ff:4b:37:
6b:d8:5d:70:b4:ae:0e:7c:ab:bb:38:41:d4:0b:ea:
16:62:37:be:bb:2f:07:49:dc:8f:d7:e3:5a:05:09:
5a:d1:c2:30:30:d4:c0:17:e6:54:65:44:43:6f:58:
63:c4:82:26:77:88:3c:26:76:f7:71:89:a7:72:84:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:32:BD:42:C8:FB:BB:DB:CD:D2:D3:5B:73:3B:0E:91:87:7E:63
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h_MyvULI-7vbzdLTW3M7DpGHfmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.229.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a4:d8:d2:ba:a1:ab:31:a8:e4:de:4b:7f:f7:b2:a4:09:a1:
f2:93:56:bf:b5:96:6d:cf:4a:01:33:9b:8f:b8:05:78:fe:d0:
8e:95:3d:43:34:e0:e0:fa:a0:68:3b:47:98:e0:ab:3d:a1:1c:
f6:d0:9e:1b:7d:b4:32:b1:27:fc:3e:e2:bb:87:55:bd:4b:80:
3a:30:ac:25:4f:02:ba:b6:3b:f6:2a:53:15:93:bc:a8:f0:5f:
91:4b:73:e6:93:5b:73:11:24:a7:d4:21:44:de:ce:32:b9:ac:
44:e7:5e:04:ce:65:d7:ef:75:40:dd:3f:e4:3c:6d:d5:15:0b:
69:84:7e:33:82:73:a7:35:d3:18:8b:2a:47:00:c0:86:ba:07:
f8:3e:5b:78:13:aa:70:d9:bf:b1:1c:5a:41:e5:72:fd:7c:16:
6b:9d:f5:ea:08:03:de:af:b5:8d:20:3f:a9:0a:c9:db:11:1b:
f9:88:8d:66:01:8f:10:55:99:80:1e:e9:a6:8a:c4:66:9b:1d:
e2:61:31:a2:8b:15:0d:e8:0c:40:c8:24:11:0a:47:1b:29:50:
d3:84:cf:37:dd:cc:c2:0d:46:78:c2:71:a3:49:6f:64:74:47:
8d:75:dd:5c:89:87:58:d9:86:c3:1f:db:a2:d8:d8:23:63:01:
b7:88:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org